ci(gh): Pin images to a hash

Signed-off-by: Andy Scherzinger <[email protected]>

Author: AndyScherzinger

.github/workflows/files-external-s3.yml

@@ -50,7 +50,7 @@ jobs:
 
     services:
       minio:
-        image: bitnami/minio
+        image: bitnami/minio:sha256-b55af04849786132c6571b916da9cfd77e1eaa813917929c06f023bebf94873b
         env:
           MINIO_ROOT_USER: nextcloud
           MINIO_ROOT_PASSWORD: bWluaW8tc2VjcmV0LWtleS1uZXh0Y2xvdWQ=
@@ -136,7 +136,7 @@ jobs:
         env:
           SERVICES: s3
           DEBUG: 1
-        image: localstack/localstack
+        image: localstack/localstack:sha256-85d0a5119b47af038301385fa16e1582912b3445e9e3a634148536eb28b1a0b3
         ports:
           - "4566:4566"
 

.github/workflows/integration-dav.yml

@@ -56,7 +56,7 @@ jobs:
             submodules: true
 
         - name: Set up php ${{ matrix.php-versions }}
-          uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a #v2.33.0
+          uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # v2.33.0
           with:
             php-version: ${{ matrix.php-versions }}
             # https://docs.nextcloud.com/server/stable/admin_manual/installation/source_installation.html#prerequisites-for-manual-installation
@@ -67,7 +67,7 @@ jobs:
             GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
         - name: Set up Python
-          uses: LizardByte/setup-python-action@master
+          uses: LizardByte/setup-python-action@f4367d0377eceec7e5e26da8f3863dd365b95a94 # v2025.426.160528
           with:
             python-version: '2.7'
 

.github/workflows/integration-s3-primary.yml

@@ -55,7 +55,7 @@ jobs:
         ports:
           - 6379:6379/tcp
       minio:
-        image: bitnami/minio
+        image: bitnami/minio:sha256-b55af04849786132c6571b916da9cfd77e1eaa813917929c06f023bebf94873b
         env:
           MINIO_ROOT_USER: nextcloud
           MINIO_ROOT_PASSWORD: bWluaW8tc2VjcmV0LWtleS1uZXh0Y2xvdWQ=

.github/workflows/object-storage-s3.yml

@@ -60,7 +60,7 @@ jobs:
         options: --health-cmd="redis-cli ping" --health-interval=10s --health-timeout=5s --health-retries=3
 
       minio:
-        image: bitnami/minio
+        image: bitnami/minio:sha256-b55af04849786132c6571b916da9cfd77e1eaa813917929c06f023bebf94873b
         env:
           MINIO_ROOT_USER: nextcloud
           MINIO_ROOT_PASSWORD: bWluaW8tc2VjcmV0LWtleS1uZXh0Y2xvdWQ=

.github/workflows/object-storage-swift.yml

@@ -60,7 +60,7 @@ jobs:
         options: --health-cmd="redis-cli ping" --health-interval=10s --health-timeout=5s --health-retries=3
 
       swift:
-        image: ghcr.io/cscfi/docker-keystone-swift
+        image: ghcr.io/cscfi/docker-keystone-swift:sha-7f82982
         ports:
           - 5000:5000
           - 8080:8080

.github/workflows/phpunit-object-store-primary.yml

@@ -60,7 +60,7 @@ jobs:
         options: --health-cmd="redis-cli ping" --health-interval=10s --health-timeout=5s --health-retries=3
 
       minio:
-        image: bitnami/minio
+        image: bitnami/minio:sha256-b55af04849786132c6571b916da9cfd77e1eaa813917929c06f023bebf94873b
         env:
           MINIO_ROOT_USER: nextcloud
           MINIO_ROOT_PASSWORD: bWluaW8tc2VjcmV0LWtleS1uZXh0Y2xvdWQ=